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PRIORITY APPUCATION 
Xfeis application ciaims- pdotity to TJrdfM States prqyisi^nal 
appltoation 60^317,574 fited o^i September S ? 20(11 s atld •• mtitted ^M^thod- md Dovioe 
for CotstM By Consumers Over Pmoni Data/;" wMd:i is h^mhymoot^m^d by 
10 refistmee, 

liie.'^ to a moihod mid device for ooBiiroi by 

oo^mimers over personal data. 

15 Today* ■ ifeo oolfectloa and dls^amM^ion of persooal ooiasiiB^r d ala for 

lii#fke : tog piirposas Is iibiqiHtoixSv Direct ma^ data to 

target tbefe activities to coiissawa most Iftij? to fee !^t^stad,Hi. iie,iBa^ter* : s 
products and/or servloes, litis personal data, however, is largely colfeted without Sxe 
OQmeuBWs" knowledge or pepxiissioB and vtM^t; :&siy tgmianeptkn. t^ : the eonairniors, 

20 For oxample, mere%mfe^¥it!i wM&h commmm traas&et business may oolloot 

odixsuni ers " persoxtal data d^riBg Itamaolio&s witli the consoittera and* unless the 
CDtisumerS: axe wvy s&ough to ^^ressly request otherwise, tb0,m#eb^tts may then 
sell the phonal data to ditact marketers or otbers wifeotit ile .ooBsuimer^ Imowfelge, 
The existing methods of edited ofp^rsoBat data 

25 Mm produced strong ooinplakite by crmsumar^ ' rights advocacy groups . & respo^se^ 

arsd t^giiktloms.. s:ptroimd&g |b0 gattog ®d dlss^iliiation of peraoBai data, 

Uiider eertam oiremBStaoees, liov^ever, consumer may bo willing to 
provide thek personal data to m^rokaats or x&aifefes > AeooMmgly y it wordd be 
30 desirable to feav© a and device for easily allowmg ooissumers to make 

sifeat|0n-#e^i:fie deoisions rogarding fee dissomiiratiOH of tfee.it personal data. 



in accordance with the present invention, tee is provided a method 
for providing the personal data related to a first parly to a second party . The personal 
data is stored In an oleetmnic device, which includes amechamsrn for locking aud 
5 B»locfeiag access t^ the persema! data. The ffiefeod teelHdes the step of receiving the 
personal data By ife seeoDdpart* dependent on whether fee personal data 
locked or unlocked state. 

^mferabi^ fee Bi©ii^:ftti^efciMMeg:te step of proving m 
economic benefit by ih* second party to die first pasty in exchange for fee personal 
10 data. Tl^ economic benefit may be s i>re&am$§>. a diseonrrt on a pttj-etese rsaadeby 
the first party, a monetary Temmieratiors, or^i^ for'a1©^fy : $»ro^a tor which fee 
first party is a participant. 

By way of ex ample, tie personal data may Include the msm, address, 
i&tephome Bi^fee^, arsd email address ofthe first party. The personal data may also 
15 ineiMe demsgtaphk M&Kaatissri i^iat^,:t«'ti@/fei|>iaj%. 

M a prefeed embodiment, the etectroni^ dmim is am Mtegrated 
«ixemf f IC") card;, which fehfe a pmoessisg unit and a niemoxy coupled to the 
processing unit, hi. this embodiment, tfes personal data and a data access code are 
stored ha the- menjory of the IC card. In addition, fee meoKafdsm fer locking and 
20 imlookf ng access to the personal data comprises an applie^tkm stored m- the memory 
of the IC card. Iliea, fee method steps of exeoating tire 

application on fee processing anil; providing a data access emle by tte iiM party to 
the application; and «n!oel«m£ access by the application to the personal data 
responsive to whetherthe prwrded data access code niatehes fee stored data access 
25 code. 

^^Iy,.;»i^^««asry of the IC card fhrfesr includes a data access 
flag stored teem, iadicative of whether the personal data is hi & locked or unlocked 
state. The step of unlocking access to the personal datamay then mekde tfeo step of 
storing in the data access flag a value indicative of an nnloo^ 
30 data responsive to whether the provided data access code- matches the stored data 
access code. B?ef£rahl^ access to fee personal: data after each 

transmission of the personal data. 

Irs: yet another embodirnent of fee present invention, the electronic 
4%mm transmtthig fee personal data nshig radfcftec|pcney 
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electromagnetic w^es, & ttds esiito ifar looldiig a^d 

mlockfeg access to tbe personal data is a medimtoai switdi coiipM to tfc 
transmitter. The elects a computer coupled to a computer 

•n.etworjk, snek asifee Internet, 
S In yet anniher mifeodtment of ilia present invention there k. provided 

mm bm method for providing personal data to a first patty to a seeond patty. 

The netted inelndes m eketr^ tllemih tte. pss^n&I data of 

tie p$t. pf&rty add : oo^tpi data associated: with c^.ditidii§ : of ac*e$s to the personal 
data. The method includes the steps of transiting data by the second party 

I S associated wife the conditions of access to the personal data : aM reeeivmg at least 
certain of the personal data b y fee second party 
data Is consistent at least m. p^; wltfe ..^ot^ition data. 

Preferabiy, as in the previous einbodimeni, te method farther includes 
tM step of providing an economic benefit by th^ seeorui party to the fet party in 

I S exchange ibr the personal data. As in. the previous enfadiinsn^ the Maetronie d^dce 
is preferably an IC card, in which ease the personal data and the condition data are 
:mmi m tie; m^^^y ^ilb EXmd «^ m applieadon dete^^ dtta 
txanBnii tted fey the second party is ecmsistent at least in part with the coadlti on data 
instead of an IC eard ¥ the eteetroMe de^ie^ may also he a eompater coupled to a 

20 computer Betwmk, mch as the Internet. 

lit yei another embodiment of the present & venhnn, fee la provided 
m. electronic device for podding persoxial data. The eleotenie device irto&des 
means for storing the persoml d^^mems for eontroBing access to the persona! data; 
and means for transmitting the persona! data responsive to the means for controlling 

25 aceess to the personal data. Preferably, the electronic device ferto tetades means 
for receding a eeonnorie valne in exchange &r traiisixiitting the personal data. Such 
economic mine may iitck^ far a loyalty progranx. 

Preferably, tie eiecircmic device is an IC card, wMeh Includes a 
processing nnit and a memory coapled to the pmcossing nari li tMagas^ the 

30 personal dam is stored in the memory of the IC; card Freffeihly, tfeeme^Bt 
eoMrolling ancess to the persoMl d^^ access flag stored in the 

moniory indicate o f whether the p ersonal data is in a looked or onloetai state and 
|b&s^ tbe personal data responsive to tlie.mmtts for ^txlr^ttktg; 

aeoess to the p$mm& data innlades an ^pMoaioB stored m the raernory. The 
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applieatioB tr a^sisfe data if the data access flag Indicates an imlocked 

slate. 

The t&cmory of the 1C card may Mr&im Include a Jxrst data access code 
stored theteirt Tiso apj>Iicati0H may fh^ receive a second data access code hy a w 
5 of fee ID card gii mav store a vsfee M in the dMa access 

Hag responsive to whether the ss.ieo.ad data access code matofe tte first data access 
code, 

Instead of a data access flag* the means ior coMrollliig access of tke 
cleelronic dorie s may be coBdliloB data stored in. tfee memory of Ike IC card, the 

19 condMort data feeing associated with conditions of access to the personal data. M Ms 
case, tibe application stored far tbd IG card x$z$$ tnd|ii3$ means for receiving data 
associated wife tire eonditions of access to fee poi^ona! data m&a&s . for 
trMsmitiliig at least certain of the perianal data if file received data Is consisten t at 
l east in pas* wife the condition data 

I S Instead of an IG card* the olectroBic de vice may be a com puter eoiipted 

to a eomputer network or a portable device including a radio traasmiuer and a switch 
coupled to tbe radio tr srym#^^ of the personal data, 



BRIEF PESCRIPTION OF THE DRAWINGS 
20 The inv^tkftft' will he better a^derstoad from the Mlowmg detailed 

d^dnpfidxi of e^etnplar^ ^feodimesrts: feemof M eory uMtion with the a^ompaaykg 
drawings m which: 

Fig. I i s a MM. mew of m integrated cireaii card aeoctrding to a 
preferred embodiment o f the present inveirtion ; 
25 Fig. 2 is a fenctional block diagram of the .Megi^ted circuit of an 

integrated cireiM t card according to a profe^ed eMhodimejit of the pmsent liwention: 

Fig, 3 is a memory map of a preferred emhodhncnt of the integrated 
circuit of Fig. 2; 

Kg, 4 i s a flow chart : 0f a prefaced ^mfeo#me0.1:• -of :a data- a^eess : 
30 application; . ., , , ■ v -: • 

Fig. 5 is a flow chart of an e^em^l^ry transaction: p.vo hdsg an 
integrated cireiui card according to a preferred emhodimam of the present tocntion; 

Fig > d k a memory tnap M^offevpr^^i erhtodixTi^tit of the 
integrated oireoi t of Fig, 2; 
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Pig, 7 is alow ciiart of anoifeer aeeoss 

application; 

fig. 8 is a flow c&art of an s^em^^ M 
mi£gmte& ekoalt card aooordmg to aoolter^^ 
i.ov"OBtion; and 

Fig, SHs a flow obart of a read f Ipetloii. o£ a data-adeems application, 
acoordnxg to aether ptefersd eeibo^mieni of ifee present iBvpition, 

Throughout immerafe or 

characters are used to deiiot^ iike eosBpstiests of &^ti^es;.M : th^; Mveatioi^ : 



A pefemmi embodmiemt of Ike. 
wife ^fe^nce to ■ && integmfed ciimMt (^[C^ eard, wteli is iliiistrated m Fig. L Tte 
IC eard 100 looks similar to a eoByeMoBal credit card, bot also melx^ an bxtegrMed 

IS drooit 122 fdomtja Mid electrical mmmm 124 ibr ooinm^mcatioii b^tweeii 

integrated ekoaii 122 and devices external to thoIG card 100, The IC eard 100 may 
be ased as a credit &&rd >: a debit oanl and mi elmimmc^mh mmi (La* a card 
aot*£ainirig moaotary value that ®m be tra&dteed wbext Itie oardfeoMor mates 
purebases) > Smiilar to %e. com^ntlomai credit card, the feM sido of the IE card 100 

20 pm&afely oonlains the eaxdholdef ^ name 1 1 2, the ca^lfeoMet's mcmm wmS^r I 14 
ibedafe imtil wMoli rhe card is v#d H«> a&d tfe fogo 118 of m Gnmd^ mmpmy 
whose serviees are Bsed by tlle.e^M (e.g., MaaierCa^d®). 

^aed in life sp eeMcatiort a^ the apisMded eial^% tetetm 
"leiTainar aball be which an IC card may 

25 emiimmifeate. A mnliial t)^^|f mdliMies a ^tii^^^ 

The keypad and ilie display a!to¥ a user of ife I€ oaxd 100 to interact with the 
Ifeoiilxml. The keypad allows die nser to select a traasaoftoa to ente a personal 
id^ntii oa&m mimber CFBST), ami to enter etansaetionaj mt>rmad0B. The display 
diows dia user to for data entry. By way 

30 of sample, a temxfn al may oompnse a eard reader in conimunioatio^i wi & or 

moorporated Imo apobi^of^ale device, ao ATM, a 0dmp^ter, ?#t#|&m> 

Fig. 2 is a functional block diagram of a preferred e^odim 
iMepMed eitouit 122. Tte integrated ciroall 122 molud^ a proQessiAg Bnit 210, a 
m^ioory uni 1 220 ? cob trol logio 230, a timer 240, input^mput porta 250, secmity 



etofey 260, .and a eo-prooessor 270. The eeritrol logic 230 provides, hi. eonjnnction 

batw«sa the memory unit 220 arid .th^;«)^ay<m^v|w^-25ai The timer 240 provides 
a timing reference signal for the processing -unit 2 10 .«d ike control logic 230, The 
5 seexuity eircnhry 260 preBrabty provides &sib!e links that oomieci the input/output 
ports 250 to internal cnerntry for testing dimngra®)i^l»»«g. 'The ihsible linfes are 
btmmd after cotnpletloB of testing to Emit later access to sensitive eirctui areas* the.- 
;m4m^m:270pm^mm:^m *N.Miy to pertes complex ecmipBtatitMs In real toss, 
such as those required by cryptographic slgedfcms. 

1G The memory unit 220 may include different types of memory, such as 

•volatile and n<ffi~*oMiie Memory and fead-aniy arid: |)togramtnafefe mem oty . For 
example,;, as shown In Mg, 2 f the memory onii 220 may inetoele read~oMy Memory 
(JiQM) 222, eteoirtcaliy eras^^ 224, 
and random-access merxwry { RAM.) 226. 

15 Mg. 3 stews a rriemory map of the memory wrdt 22© a*e«mling to a 

prelerrsd emhodhneoi of the present twentlom. As shown :m Fig. 3 , the memory uidt 
220 stores :teek.«JH.^«eiO fcmd''i^M^ as secret ■<^^tbp^hio':keys: .320 '^d. a 
card FIN 320. The secret cryptographic keys 320 may fee any type ofweHdinown 
<^yj^p^^b-ke^s > ,«ucft-as:Ste ptivatefe^ #fpiiyierkey|>a|rs i --wM«^. are used for 

20 auth^cation of the IC card and data stored in die 1C card. The ci^.i^.330.jaayfee 
• i^^-:l»lockwd nnlocfe access to d^e lC card, tre&rably, the secret cryptographic 
keys 320 and the card P2N 330 are stored in a secure area of ROM or BEFROM that is 
either not accessible or las very lining accessMIMy fiota omside the S!C card. 

''1tt^imgmoty::iMit220'-^aI$©- stores the opeiMhag system 300 of the 1C 

25 card 1 00 . The opet^Mg system 3 0§ loads and executes 10 card applications and 
provides file management and other basic card services to the IC card applieadoas, 
Preferably, the operating system is stored in ROM. 

In addition to the basic services provided by the operating system, the 
mmmr? ««« 220 may also irKJtode r^e or more IC card applications 350. For 

30 exaaipfc, ifihe tC Car4 is to be aged as aft eleeimnie cash eard s the appBcafion 

Mondex™ Futsedroni Mondex International Limited rnlght be raehMgd on die IC 
card, which loads an el eotKJOic value of a certain currency onto the ID caret In 
addhtjoa, if the 10 card is to be used as a credit card fee Master Cardf; Credit 
appKeation fom MasterCard® In temalnHJal, foe, may he included on the IC card. 



^efeab% fee operating system 300 of the IC card 100 should m$pm multiple 
aipieatiorrs 350. Aaexssfle of such, an operatmg system is the MULTOS™ 
ppeiratmg system fern Mend ex MstsistiOBal limited, 

ArxIC c&rd ^Kicgtio^:iMyii»Si'a4e feotltprofmm and associated data 
S files, wMch are typically stored in EBPKCXM. The application program may fee 

write ei ther in the native diagramming code of the proeesshig tsxslt 210 or it imf be 
wrl txm its: a higher level Iang»agei3m imistbe tm3slaiM feei^ it is executed ©a fee 
l^oeessing unit 210, An example of suck a Mgher Ism;! language for use on i:C cards 
Is the Ml/L'rOS m Executable Language (MEL). Arivantsgeously, by using a higher 
10 level language such as MEL> as apphcatiori program is eagahie of running on. rniiMpIe 
hardware platforms wiihortt any meed for re- writing. 

Because iC cards typically hawHhmitcd rnemory capacity due to the 
s«e and cost restraints of placi ng memory on the IC cards., an IC card may also ha v e 
prinferves 310 stored in ROM, which ate svihrtratines that pexfbrr« ftef rtently used 
IS fmsctkvas or procedures, such a« n^theniatieai tmetiorrs. The primitives 310 are 
usually written in the mtree language of ' fee processing imii 210 so that they can be 
executed very quieldy. 

In accordance with a pr eferred embodiment of the present invention, 
the memory writ 220 also Includes a data access application 340. The data access 
20 application 340 has associated therewith a data access PIN 342, a data access flag 
344 and a personal data fife 34€ The data access PIN 342 perarl ts access to certain 
functions of the data access application 340 (to be discrissed below). The data access 
Sag 344 Irsdieatee the state of the personal d^ 

data lie is locked or miloefced, The personal data fil e 346 corrtaffis personal 
25 ialbrraation of the cardholder. Such btftfrmfork im^it^^^t M&mpU, pes mm, 
dkiress,, t«le|?feo»«-.nta?3ib€rs email address, and/or demographic infers a^irsa of tfee 
cardholder. 

Kg, 4 Is afldw chart of a prefeoMenthodinieM of tbe d 
application; 340, The data access application: 340 has Jbnr nmctkms: a store/edit 
30 funedony a lock functions an ismTock:'fcaeiio% arid a read hnietiorr. The store/edit 
ftmctiori is used to store and/or edit iniomiatKHi in the personal data file 346 . When, 
this function is selected, it is necessary to transmit a PIN' to the data access application 
340, & step 410, fee data access application deternn^ PIN 
matches the data access PIN 342. If the transmitted PfK matches the data access PIM 



342, in step 420, the data mc^^k*^-stei^.^ or revised data m the personal 
data file 346, Otherwise, If She transmitted. PM does not match the data access MM 
step 480, the flam access application returns an enm code. 

When tie lock taction is selected. In step 430 ? the data access 

5 application stores a value in the data access Hag 344 indicative of a locked state fesr. 
the personal data lib 346, When ^e'lihte^itute^i^^eK^ aPWis again 
required to be provided to the data access application 340. In step 440 5 f w data 
access a|3pIlcatic3a:determiB«S whether the transmitted P!M matches the data access 
PIN 342. If the transmitted FIN matches the data access PIN 342, In step 4S0, the 

10 data access application stores a; value M the data access Bag 344 indicative of an 

unlocked state for the persona! data file 346. Otherwise, if the transmitted FiN does 
not rhateh Che data access KN 342, hx step 480. die data access ajjpKealioa returas ait 
error code, 

1^m fe,j^iUt«*loa ^ selected. In step 4<tf) f the data access 

15 application 340 determines whether the data access lag 344 indicates that the 

personal data file 346 is unlocked. If the data access lag 344 fedieates an unlocked 
state; the data in. the personal dMa Hie 346 is returned in step 470. Dfeerwfes, if f ie 
data access Bag 344 iisdlcate® a kseted state, ; a error code is returned in step 480. 

Fig, 5 is a ilow chart of an exemplary transaction Involving the data 

20 access application 340 of the KJ card 100. It is assumed feat prior to the feeding nf 
the transaction, the data access Sag 344 indicates a looked stale lor the personal data 
file 340. rn addition, it is assnmed s tor trie purposes of this example, that the 
cardholder is ready to buy a product nshig the MasterCard® Credit sppMeatlo© stored 
on- die IC card 100. Id step M0 f the cardholder determines to permit the merchant 

2S with which fee est she Is about to transact hosiness to have access to tire data in the 
personal, data file 346. Accordingly, nsing atermiaaf p«o^d#:fey%^»i^lj.a«t v a» 
cardholder eKecwfes the data access application 340, selects the unlock &noMon, and 
enters a PIN matching the data access PIN 342. The data access application 340 then 
sets the data access flag 344 io a ¥^tt€.MoaiWofm.^b#:^:si^e for the personal 

30 data file 346, 

In ss.cp |20, iheeanlh©^^^ card 100 to tender payment for 

tile product for w hich he or she is interested M htiyixig. Once the paynieM is 
processed, by the msrchaui in step 530, the merchant atterrrpfs to read die personal 
data fie 346 by seating the data access application 340, Since the data access flag 



344 indicates an unlocked stats, the data access a|s|>Iicato 340 iomsmits fee data fn 
fee personal data §le 346 to the merchant. 

Preferably, in step 540, tfee merchant provides M economic benefit to 
the cardholder in exchange for access fa the p«rsossl data itfe For ssaasple, fbc 
5 merefeatU; may provide ^t^ti»mm«^«aMlfe6.f6tm of a purchase discount or a 
rebate. ASteiigtoiy, i&s rnoM&pgt :ps»y $rovicte iac%cet -'xt»act£M3(i^^c%L'i3i: t^iiii'^tm of 
loyahy points that arc redecTOafele attd er the terms and conditions of a loyalty prolan 
tor whi.cb. the cardholder is a participant. In step 550, at the sad of Che transaction, the 
cardholder locks the personal data file using the data access application. 

10 Alternatively, the data access application may mtoHiatically lock the personal data 
file after each to^issioti of toe data In. the personal data tHe. Tims, in aifese^uent 
ttattsaetioJis, effe&r niorchaats arc ptm.miM from accessing the personal data flte 
unless it Is explicitly nnloeked by the cardholder. 

Fig, 6 shows a -memory map of anotier preferred .embodiment of the 

15 memory imit 220. The embodiment of Fig. 6 includes an operating system 600, 

primitives 610, secret cryptographic keys 620, a card PBS? 530, and appKeatioj«s 650, 
which aws the same as tk>se- ^M^^wit%,^emac^it^ the ernbodlment of ¥ig, 3, 

The embodiment of Fig. 6 also inokdes a data access application 640, 
which has associated therewith a data access pin 642, access condition data 644, and a 

20 persona! data file 646. The data access pin 342 pemrlts access to certain mnciioas of 
fee data aceesis application 640 (to fee discussed Below), The access eoridilion data 
644 indicates the terms and ooadiiions under which the data in the personal data lite 
646 is to fee accessed. For example, the access condition data may Micate the 
identity of fee merchants to whom the data in the personal data files may he provided. 

25 |a addition, the access condition data may indicate fee miniranm remuneration the 
cardholder requires lor access to fee data in the personal data file. Boch merchant or 
remnncration reennrements may fee speci&d for the data in fee perscsnai data Eie as a 
whole or may be specified mdividnally for each data item in personal data file. As 
previously discussed, the personal data file cmt^i^o^/^forat^loa of fee 

30 eardhoMer, such as the name, address, telephone nmnber, ernail address, and/or 
demopaphic information of the cardholder. 

Fig. 7 is a flow chart of a preferred enibodlnient of me data access 
apphcatitsri 640 of Fig. 6. The data a^^ a 
store/edit personal data fknefiom a store/edit access condition data function, and a 
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read function. "When the store/edit personal data fimciion is selected, the data access 
application 640 detemnrtes in mp 710 whetfer a transmitted PIN batches the data 
access PIN 642. If the transmitted PIN matches the data access FIN 642, the data 
access application stores new or revised, data in the personal date file 646 m step 720, 
5 Otherwise, If the irammitted PIN does not match the data access PIN 642, the data; 
access application telums an error code in step 770, 

Wlxan the store/edit access condition data function is selected, fee data 
access application 640 delemiiaes in step 730 whether a transmitted PIN matches the 
data access PIN 642, If the traimmitted PIN matches the data access PIN 642, the data 

10 access application 640 stores new or revised access condition data in step 740. 

Otherwise, if the teaiismitted PM does not ma foh the data access PIN 642, the data 
access application returns an error code in step 770. 

When the read function is selected* the data access application 640 
compares data provided by a merchant associated with the condi tions of access with 

15 the conditions specified by the access condition: data 644. If som e or ail o f the 

conditions are satisfied, some or all of the data in the persona! :dM& file is pro vided to 
the merchant hi step 760. Otherwise, die data access application 640 returns an error 
code in step 770. To. en$are the aeenr&ey of the data to he provided by the m ercfaant, 
such data may he encoded into the merchant tomais or digitally signed by IC card 

20 assners, 

Kg. 8 Is a flow chart showing a ...topical - tr^^^iip^ .iav^vSng : aa-IO 
e&rd with the data access appMeation 640 stored teein. In step 81 0, die payment 
processing of the cardholder** purchase Is performed, S^eh processing tmy involve, 
fer sample, the execution of; the MasterCard® Credit a:pplieation. on Mm IC card, Id 

IS step 830, after the payment processing, the data access applieation 540 is selected and 
the merchant attempts to read the personal dam Sle as described wilfe reference to the 
read fimciion of the data access application 640, if fee merchant anocessfidiy reads 
the personal data fda the marehaot provMes tfea eardboMer with a form of 
renrnnetation in step 830, 

30 The ernhodknents of the data access applications of Figs, 3-4 and Figs. 

6-7 are not exclusive, but may he combined* A data access application combining the 
features of the prior embodiments would operate in the same mannsr as previously 
discussed^ except for the read dmciiorr 
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Elg. 9 Is a Bow chart of a preferred .ssMfeo^ista^.pl read finicdon 
ibr a data access ^pHcatioe ecrmbiBiiig ihe featess of^ep^^i&ttS imfe©<imm&. M 
step 3 lO.ISm &m access isp^mBm fkst mmxfmm if the data access Sag indicates 
a» imbc&ed state for the persoBa! dsta Ste, If the d ata a^ess Sag imlkatss a«. 

5 unlocked state, 1b step 92C> ; , the data access application dsterrmhiss wfielher the 

nwehani data satisfies the coi^tlom ladieatsd by the access condition data. If both 
&e data access flag Indicates a« on&efed state aad tliss access conditions are satisfied, 
the da^ access ^ic^o«;tra»saji# fee personal data fife to fee merctxaM m step 
Dfeerwise* m mm, cede m returned to the merchant in. step 940, 

10 Although the preferred etjibediments of tlie |5f€set^ m^emtott utilise an 

Id card, the present im?entio» Is not hrniled to such emIsMlBMKts. Other portaMe data 
devices wMsk are utilised In commercial rxsnsacions isay be nsed with the pfesest 
invention. For exarxipie, 

electoiic toll collection systems thai make paying tolls on bddges aM turmcls fester 

15 and more convensem for motorists. One such system is the B-E Pass system 

ixr#emented York State, The 

E-2S Bass system ases a potable electronic device that a ra<lio ttammlttex that 

tta«smits a code exclusively ideMfyirig a motorist* s accovnii When a motorist 
approaches a toll gate, a receiver instated in the Mi gate receives the motorist's 

20 imkitse code and the system antonmdeally deducts a toil ameont frorn a prepaid 
account Md by the Biotodst . 

According to the present invention, die personal data of a motorist 
could be stored in such an eieetromo fe>ll device am! oordd be transmitted to the tot! 
autiiortty iw its use. The electronic toll device coaM fee equipped with a nrechaiiisni 

25 for locking and BBioeMng the personal da% such as a switch feat omurols the 

transmission of the personal data. Ixi return for the trajismissipn o.f the personal data, 
the toll authority emdd prcrvide a toll discount or otter benefit. 

As yet another example, the present indention could be utilized whh 
electronic commerce over a eonipntsr network, such as the JMernet M this case, the- 

30 personal data of a- eornpntet user, a data access MM* and a data access application 
could be stored on the computer nser*s computer, instead of on an 1C card. In 
addifioti, a data access flag aad/or eondiion data may also he stored on the as&r *s 
eanrpnter- Then, when the nser engages in an electronic transaction with a merchant, 
fee user s personal data may be transmitted to the,^«r»ha?it ? S :ce^pwte-ll;|lie personal 
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data iikis mlocfcad by tfee i&er ai^Mlhe » cortcIMom Mdteated 

by fee c<Mc!Mon d &t& of fie mm. 

Although the present Invention has boon described with reference to 
oertmn.prsferred embodin^K various modifications, alterations, and sufestltuiona 
5 will Be town or obvlo&s to those sMllmi m fee art witlio at deparfeg fim the spirit 
and scope of the invention, as denned by the appended claims. 
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L A method ffarprovMfeg gemmial data. elated to a first party to a second 
party, said personal data hemg stored m an ^lectroiiic device coiBpri sfeg aMechanism 
for looking: asi imk^ldbg; ac^e^: to said perso&a! data, said me^feod compWsmg tho 
5 step qf rec-ei^kg said personal data by said secern! party dopmdaBt on. whether smd 
f ptuoml data is in a locked or iinfock^d state. 

2, The mMhod of claim I , further eompiismg-iiestep of trmsndttMg said 
personal data fey said electronic device resporis iv.e to whether said personal data is in a 
locked or tmlooked state, 
10 3 , lie method of elato ■ I* feeiore said rooming atop* itothar deluding the 

step o0oeidmg or imlocfcmg aeeess to said personal data in. said electrode 4eM&e by 
said first party using said meehamsm, 

4, Tho method of claim l ? fetdier inolxidrng the step of provicllng an 
beaeSt by said second party to said 

IS data. 

5, The nieihod of claim 4, wherein said economic benefit is a discount on. a 
porefmse made by said first party; 

<i. The tiie&od of elahia 4* wtedi Md ^cOB^Me.beBaSt Is monetary 
7 \ The method of claim 4, wherein said mmmtxm bmmSx ineJndes poinM Mr 
20 a loyal ty program &r wMeb said first party is a pardeipant 

8. The xnetfeod of claim 1 , wherem said pm^ml data, includes tlie name, 
address, and telephone namber of saM fest par£y, 

9, The method of claim 1 ? wherein said personal data includes the email 
address of said first party; 

25 ICL The method of claim I , wlierem. said, p^sonal data mcJute.. demagtapMp. 

infbrma&H related to said first party> 

X L Tho method ofedahn of claim l y wherein xn^mmmm for looking and 
blocking access to said persona! data is a mechaoieal switch. 

12 JTfee m wfaereln said rfectrome device is an iHtegfatea 

30 circuit card coxxjptising a poeessiag miit and a m^p.ory coup led to saM processing 
miitf said personal data ^itig M#^d % Mid memory> 

13, The me&od of claim 12, wherein said pechaidsm for teel&g and 
.unlpcMtig .aoce$s : ^ :Said : personal • data/ ooffigfrises-.^ application stored m said 
memory. 
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14, 'file raeftod of claim 1 3 r wfeetem^ data 
access code stored therein. 

15, The method of claim 14, before the sleg of rec^lng > tether oonrpr!$ing 
the steps ofi 

5 execiumg saM applia^ion cm said processing unit; 

ptovid&g a data aeoess code by said fet party to :sai#. ap|s!kat|qir y . 
nnf coking aeoass fey said appli cation to said persmsal data tcspo^si ye to 
whether said provided data aeoess code mstc&cs said stored data access eo de< 

IS: "Eke method, of claim 15, wherein said mesnory ferther melndes a data 
10 access flag indicative of whether said personal data is in a locked or nnioefeed slate, 
and wherein said step of unlocking access iBcludaa tke st^ of storing in said data 
access flag a v&lm indicative of an maiodked state fer ^M^eMdiial data responsive to 
wfa.0ife said provided data access code matelies said stored, data access code. 

17, The iBetfaod of claim 13 , futlihcr eomprisixig the step oflocfeg access to 
1 5 said peraonat data fey said appKcatlcm alter each trammlssiefjr of said pssmm&I data, 

18, Tlie method of claim L wfeerdn smiI step, tyim^mmng -$m& pmmn&l data 
iilchife ms^riiBg said ^lectrani e device in a terrninaf eapah le of reading said 
eleeironio device. 

19. The method of claim 1 , wherem 

20 transmitter for trarisrnxttirig said personal data using radio-ftequeocy ele£t^magneti0 
waves, and wherein said slop of recei ving said personal d#a.:iN&des t^^iag said 
personal data throng eleetromagnetlc waves, 

20. The matliod of claim 1 , wherein said electronic device is a computer 
coupled to a computer network, 

25 21 , A Method for provi dm^ to a Mt$t party to a second 

p^y. 'osmg m eieeta^e device having stored therein said personal data and condition 
data associated villi conditions of access to said personal dat% said method 
comprising the steps of; 

transmitting data by said second party associated wi& said eondiioris 
30 of access to said personal data; and 

receiving at least certain of said personal data b y said seeond party 
dependent on whether saM tmmmilted data is consistent at least hi part wi& said 
condition dal:a. 



2%, Th?. method QfvMmMt WW. tmvptimm $m step of transmitting at 
least certain of said personal data by said efctn3mo device depex\dt>.n.t <:m whether said 
transmitted: data is consistent a I least in part wini said condition data, 

23. The metnod of claim 21, Either including the step of provMmg as 

5 economic benefit by said seeoa<l jpa% to si^ilM partf in s^hange Ibr said personal 
data, 

24. The raetbod of claim 21 ; wfeerdu said electfome devioe is atUfilegrated 
circuit card comprising a prooessmg issit aM a taemory «oupM to saidptxseessisg 
unit, and wtafe said psaaona) data a«d said conditio* data are stored in said 

10 meixtoxy. 

25< The method of olaim 24 wfereitrsa^^^^ an 
spisHcaMaa stored in said memory, and furtrrer ce^risiag the step of detsiiBixsiag by 
said application -whether said transnHtted data is consistent at least In pari with said 
condition data. 
IS M An eleoimrdo device comprising: 

means &r storing personal data; 
siieans for control hng at? cess to saM phonal Asia; ami 
ms&BS feirai^^ to respoMxv^ to saidjii^s for 

eontmllmg aeeess to aaidpsi^onai data. 
20 2%. Tlie.%l.eetonie : <te%%e ofdMm 26, M&mr comprising means for ^ceMng 

a economic value in exchange fb? fe^ dm> 

2% mkmmii m& m<m<msfe. v&m is 

29, lite ^ of cl aim 27, wl^etem smcl cccmomk value Is points 

25 a loyalty pmgram, 

3C3L Tfee electronic device of ckim 26, wlwain said p£r§omi data mcIMe^ tia 
mmw, address, md t^phmm isate of & p erson 

SLTfes^ mid phonal data mciudm the 

email address of a person 
3 8 32. Tfee oieetromc device of claim 26, wh^em said phonal dala mcludes 

dsmogtapfete mlbrm alion of a persoB: 

33. Tha elactrmdc dmim of claim 26> wteem said means for oo^troIllBg 
access to mM personal data comprise a mechardeal switch. 



34. The electronic device of claim 33. wfeerem said mearis m txmmmm^ 
sm pmmrM dM&m a radio transmitter coupled to said meolaaaipal swiicfe- 

35. TKe etect?»rpe deviee of claim 26* wksrela said eleetromc dmcs k am 
integrated circuit card com|ms«ig a processing anil and a memory eonpled to said 

5 proeessmg nmi, said personal data being stored its said m&mm?, 

3<5, The electronic device of claim 35, wherein said means for controlling 
access to said personal data oompises a data access flag stored in said memory 
mdicaflve of wfee&er said personal data Is tn a locked or nnioefced state, 

3? . The ^ectronic device of claim 36, wherem said memory fm&m Ineindes a 
10 first data access code steed Ihetsm, and fert&c^ ^mpl§»ig.mea»s,for receiving 
second data access^ 

in said data access flag responsive to whether said second data access code matches 
said feat data access code, 

38. The eteetrome device of claim 3S, wte»Msi.d 3^ie^:I^ to^itfeg; 
15 said persona! data resp«s! v© i& said Means for eontxolnv&g access So said personal 

data comprises an appheaiiori stored in said memory, 

39. Tr^eieetroBicdewlocofcMrnS applicaioa conBidses 
means for trasismitdng said personal data if said data access ftog indicates an 
miloeked state. 

20 40, The electranlc device of claim 3S V wfeerein said appiicatic« imludes means 

for storing a value mdicatke of a lo cked slate in said data access flag alter each, 
transmission of said personal data, 

41. T he electronic device of claim 35, wherein said means for conlxollirig 
access comprises condition data stored in said memory, said condition data being 

25 associated with conditions of access to said personal data. 

42. Tke eleetrmiio device of claim d!, w^^ 

said personal data responsive to ^di^am^rcpa&^ll^.^p^ to said personal 
data comprises an applicaticsn stored In said memory. 

43. 'ffieeteeteome device of claim 42, wherein said application includes means 
30 lor receiving data associated with said conditions of access to said personal data md 

means mr trafflsniitting at least certain of said personal data i f said received data is 
consistent at. least in pari with said condition data, 

44. Hie electronic device of claim 26 s whereirt said electronic device is a 
eompnter coupled to a computer network. 
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